CVE-2026-40690 — The asset dependency graph did not restrict nodes by the viewer's DAG read permissions: a user with read access to at least one DAG could browse the asset graph for any other asset in the deployme — CVE Database · The Intelligence Room